# ndaal SBOM Auditor — analysis of openbao_2.6.2_linux_amd64.deb.sbom.json (SBOM #1)

## SBOM metadata

| Field | Value |
| --- | --- |
| Name | openbao_2.6.2_linux_amd64.deb.sbom.json |
| Format | spdx-json |
| Spec version | SPDX-2.3 |
| Components | 2 |
| Source | upload |
| Size (bytes) | 2583 |
| SHA-256 | `c176ef194d77706c09432326f8e0f029fb8d2550e66ed275854fa400d23a9d92` |
| Ingested | 2026-08-20T13:41:15Z |

## Analyzer summary

| Tool | Version | Status | Findings |
| --- | --- | --- | --- |
| grype | 0.117.0 | fail | 0 |
| trivy | 0.74.0 | fail | 0 |
| osv-scanner | 2.5.1 | ok | 0 |
| bomber | 0.5.1 | ok | 0 |
| bomdrift | bomdrift 0.9.9 | ok | 0 |
| inspektr_cli | inspektr 0.1.9 | ok | 0 |
| shieldbom | shieldbom 0.3.0 | fail | 0 |
| provenant | provenant-cli 1.0.7 | ok | 0 |

## Licence & provenance from provenant

| Kind | Value | SPDX | File | Confidence |
| --- | --- | --- | --- | --- |
| license | CC0-1.0 | CC0-1.0 | /tmp/sba-analyze-640-1-1787312975561443959-0/input.spdx.json | 100% |

## Skipped or failed analyzers

- **grype** (fail): failed to produce parseable output
- **trivy** (fail): 2026-08-21T11:49:55Z	FATAL	Fatal error	run error: init error: DB error: database error: --skip-db-update cannot be specified on the first run
- **shieldbom** (fail): Parsed 2 components from "/tmp/sba-analyze-640-1-1787312975561443959-0/input.spdx.json" (SPDX 2.3 (JSON)) Found 0 vulnerabilities Found 2 license issues  DISCLAIMER: This report is provided "AS IS" without warranty of any kind. Vulnerability results are based on publicly available data sources (e.g., OSV.dev, NVD) which may be incomplete or delayed. The absence of reported vulnerabilities does not guarantee that the software is free of security issues. This tool assists with security analysis but does not constitute a complete security assessment, legal advice, or certification of regulatory compliance (including EU CRA conformity). Users are solely responsible for their own compliance determinations. Always perform additional security assessments as appropriate.